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MULTICAST TRANSMISSION OF INFORMATION OVER A SATELLITE 



5 COPYRIGHT NOTIFICATION 

Portions of this patent application contain materials that are 
subject to copyright protection. Tne copyright owner has no 
objection to the facsimile reproduction by anyone of the patent 
document, or the patent disclosure, as it appears in the Patent 

10 and Trademark Office. 

Field of the Invention 
This invention generally relates to improvements in computer 
systems, and more specifically, to utilizing multicast satellite 
15 broadcast technology as a bridge between telephony operations 
and the Internet. 

Background of the Invention 
' Traditicnally data has been delivered to nerwork-connected . .. 

20 deskt=? personal computers either by broadcasting or 
unicasting. while the need for multicasting data has been 
unsatisfied. Broadcasting is a form of addressing wherein the 
destination address specifies all destinations: all destinations 
mdiscriminately receive the data whether or not the data is 

25 needed by the destination computer. Where data is not needed 
at a particular network-connected personal computer, the 
transmission of the data is an inefficient use of resources. This 
can be particularly disabling to a necwork that does not have 
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sufficient bandwidth capacity for all of the data traffic. 
Broadcasting is less efficient in direct relation to the proportion 
of users in the community of the broadcast that do not need the 
broadcast data, 

5 

In' contrast, unicasting is a form of addressing where the 
destination address specifies a single destination. Unicasting 
eliminates the unnecessary transmission of data to destinations 
that have no need for tne data, but is still inemcient because 
10 the data, will be replicated on the network for each individual 
desmaticn. For example, when data is transmitted to 20 
personal ccmputers connected to a server, 20 transmissions of 
the data will be made, each with a different individual 
destination address. 

15 

Where data needs to be transmitted to a limited set of all 
network-connected personal computers, transmission using 
broadcasting or unicasting falls short of efficient resource use. 
Multicasting offers mere efficient resource use. Multicasting is 

20 a form of addressing wherein a source sends data to a server 
and the server sends one copy of the data to each of the 
destination computers. This form of addressing is particularly 
beneficial where the link between the source and the server has 
limited capacity or high cost because only one copy of the data 

25 that is intended for multiple recipients is transmitted to the 
server. Multicasting makes the most efficient use of an 
expensive link or a link that has 'insufficient capacity for 
transmission to multiple destinations by reducing the number 
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of transmissions across the critical link to one. rather than 
requiring that multiple transmissions be made for each 
destination address. 

5 One arena where multicasting is implemented is the Internet. 

Multimedia applications involve text, graphics, voice and video and 
hypertext operations. Multimedia applications typically require large 
amounts of data in comparison to traditional computer applications. 
The Internet has increasingly become the ccmmunicztian network of 

10 choice for the consumer marketplace. Multimedia applications exist 
on the Internet, but the throughput of the Internet limits the 
usefulness of multimedia applications because multimedia 
applications are highly interactive and require higher throughput than 
the Internet can provide. The limitations on bandwidth make the 

15 Internet more suitable and emcient for low bandwidth applications 
such email and smaller multimedia applications. 

The Multicast backbone (MBONZ) is a virtual network on top of 
the Internet which supports routing of Internet FrctcccI (I?) 

to multicast packets, intended fcr multimedia mansmissicn. 
MBONZ enables pubiic access to desktop video 
ccmmunications. However, the quality is poor, with only 3-5 
frames per second instead of the 30 frames per second of 
commercial television. Therefore, transmission of multimedia 

25 data via the Internet is too slow, even using multicasting. 

Two independent technologies have emerged that provide 
greater speed and throughput (Internet Protocol (IP) Multicast 
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and Digital Video Broadcast:] that together have the potential to 
provide for transmission of multimedia information over a 
network. IP Multicast is an important advance in IP networking 
that has been under development since the eariy 1990*s but is 
5 only now receiving broad (and growing) practical industry 
backing through the commercial availability of network 
infrastructure elements . 

An extension of standard I?. IP Multicast allows applications' to 
10 send one copy of information to a group address, and have the 
informaticn transmitted to each recipient of the group requiring 
receipt of the information. I? Multicast is more efficient than 
point-to-point unicast because the source need send only once, 
and more emcient than broadcast since only interested nodes 
15 are impacted by transmission of the informaticn- I? Multicast 
thus scales well as the number of participant and collaborations 
eroand. and it integrates well with other new I? protccols and 
services, such as Quality of Service requests to support real- 
time multimedia. 

20 

However, despite the advantages of I? Multicast, its terrestrial 
implementation may be slow because ail routers between the 
sender and the receivers must be IP Multicast enabled. Even 
then, network bandwidth may be limited for some considerable 
25 time. The demand of consumers for digital satellite TV systems 
has driven the development of Direct Broadcast Satellite (DBS) 
systems that can broadcast directly to small, low cost receiver 
equipment. The standard likely to become dominant on a global 
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basis is Digital Video Broadcast (DVB) which was developed by 
the European Broadcasting Union. 

DVB specifies standards for the digital broadcast of video, 
5 sound and data across satellite (DVB-S), cable (DVB-C) and 
SMATV (DV3-CS) data link layers. DVB specifies common 
conformance standards at several levels including channel 
coding (Reed-Soloman forward error correction), transport layer 
(MPEG- 2 Systems Transport b its tr earn) and elementary stream 
10 lavers (MPEG- 2 for video encoding and MFEG-1 for audio 
encoding). An elemental stream is a single, digitally coded - 
component of a multimedia channel (e.g. a single ceded video or 
audio stream). MPEG- 2 elemental stream encoding thus 
orovides 2ood VKS quality video at 1.5-2 Megabits asd studio 
15 production quality video at approx. 6-8 Megabits. 

MPEG-2 transport enables video, audio and daia zo be 
multiplexed onto the physical channel of choice, ~ Lth DVB 
specifying the remaining system elements for each transport 
20 media being used. For example with satellite ccizmumcations 
DVB specifies the physical channel (single 3S Megabits satellite 
transponder), signal/ noise ratio and channel coding (eg. 
2bit/ symbol QPSK mcduiarioh). 

15 Satellite communications oner sufficient bandwidth for remote 
multimedia applications, however satellite connections for the 
typical computer user are practically non-existent and 
expensive and do not allow for use of economical open 
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client/server technologies. A client/ server. architecture is an 
economical, proven and common form of distributed system 
wherein software is split between server tasks and client tasks. 
A client sends requests to a server, according to some protocol, 
5 asking for information or action, and the server responds. 

There may be either one centralized server or several distributed 
ones. This model allows clients and servers to be placed 
independently on nodes in a network, possibly on different 
hardware and operating systems appropriate to their function, 
10 e.g. fast server with an inexpensive client. 

There is a rapidly increasing market demand for network based 
application services thai enable the efficient operation of 
computer applications which are one-to-many in their 

15 information flow and which require high network bandwidth. 
Major advances in digital transmission, encoding and inter- 
networking technology and the advent of direct broadcast 
satellite have matched this. This market need combined with 
the emerging technological capability has prompted 

20 development in accordance with a preferred embodiment. The 
engineering challenge was to develop a system solution that 
makes optimum use of emerging digital broadcast technology 
such as DVB/MPEG while seamlessly integrating into an 
emerging IP Multicast standard for data technology. With such 

25 an emergent service, the architecture of any solution must also 
be scaleable from an early system for deployment as part of an 
individual customer solution, through to a multi-customer 
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service platform capable of simultaneously supporting multiple 
large business customers. 

There are two basic models for delivery of information to 
5 endusers: (a) information can be requested by the end user of a 
central source (pull model), or (b) information can be sent from 
the central source to the end user (push model). Established 
LAN and WAN technologies, applications and services are very 
efficient at supporting the pull model of information flow. 
io However, as advanced information technology becomes critical 
to organizations, there is a rapidly increasing market demand 
for information technology and network services that efficiently 
enable push oriented, one-to-many information flow. 



if In addition, even when data compression is used, the 

increasingly multimedia nature of applications requires high 
bandwidth support of a one-to-many information flow. And even 
many non-multimedia applications require high bandwidth for 
the timely transfer of large files of information. The concept of 

20 multicasting was originally developed to provide application and 
inter-network services in response to a demand for high 
bandwidth one-to-many services. Multicasting utilizes the 
natural broadcast capabilities of a satellite infrastructure, while 
smoothly integrating with existing and emerging terrestrial data 

25 network services and pull oriented application services. 

A solution to the problems of transmitting multimedia data and 
supporting call processing across the economical Internet while 
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utilizing the high throughput of orbital satellites would integrate - 
the Internet and satellites into a hybrid telecommunications 
system using multicasting client/server technologies. 

5 The present invention relates to the integration of satellite 

transmission facilities with the Internet and telephony systems ♦ and 
more specifically, to a system, method and article of manufacture for 
using the Internet and satellite transmissions as the communication 
backbone of a distributed multicasting client/server communication 

10 system architecture. This architecture allows a user to transmit data 
to a central site and then transmit the information through a satellite 
link to numerous destination ground stations that have direct 
broadcast satellite PBS). The satellite receiving services are old; 
however, multicasting data through a satellite lrnk to local receiving 

15 stations that distribute the data by unicasting to numerous individual 
destinations on a standard, non-proprietary software transport 
mechanism, such as the internet, is new. 



SUMMARY OF THE IN^/ENTION" 
20 The foregoing problems are overcome in an illustrative embodiment of 
the invention in a hybrid network computing environment wherein a 
high bandwidth data is transmitted via satellite links to individual . 
computers. The solution is to use multicasting and satellite links in 
the transmission route where speed and performance and cost are 
25 most critical, up to the point of local distribution via a local area 

network or the Internet- The data is transmitted from the source to a 
receiving facility at the site of final distribution via a satellite, which 
greatly improves performance in comparison to transmission via the 
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Internet or the telephone system. The cost of this transmission is 
reduced and the performance is increased by multicasting the 
transmission. When the multicast information is received at the 
receiving facility, the data is sent to each of the individual destinations 
5 using a standard, non-proprietary mechanism such as the Internet. 
Scalability and economy are improved through the use of the industry 
standard non-proprietary software transport mechanism (IP} at the 
receiving facility. 

to In a farther aspect of a preferred embodiment of the invention, the 
receiving facility will examine the status of the transmission and if the 
transmission was unsuccessful, the receiving facility will transmit 
information indicating an error status to the source, and the source 
will respond by transmitting the multicast data again, thus providing 

15 reliable data delivery. 

In scii another aspect of the invention, the gateway server is 
conisured to route any messages larger than a certain size to a 
satellite broadcast facility if the messages are traveling more than 
20 10CC miles. 

In ye: another aspect of the invention, a production token ring 
network is in communication 'with the gateway server. Tne 
production token ring network is optionally coupled to an 
25 interior packet filter configured to accept only communications 
originating from a predetermined set of addresses. 
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In an additional aspect of the invention, video transmissions are 
encoded according to the MPEG-2 standard IS- 138 18. 

Brief Description of the Drawings 
5 The above and further advantages of the invention may be 
better understood by referring to the following description, in 
conjunction with the accompanying drawings, wherein: 

Figure 1 illustrates the general topology of a source and a 
10 receiving facility communicating via a network in accordance 
with a preferred embodiment: 

Figure 2 illustrates the physical system decomposition in 
accordance with a preferred embodiment: 

15 

Figure 3 illustrates an IP datagram in accordance with a 
preferred embodiment; 

Figure 4 illustrates the path of an IP multicast datagram over a 
20 network in accordance with a preferred embodiment; 

Figures 5A through 5B describe a flow chart of a computer 
software program that will transmit IP multicast data using 
sockets in accordance with a preferred embodiment: 

25 

Figures 6A through 6B describe a flow chart of a computer 
software program that will receive IP multicast data using 
sockets in accordance with a preferred embodiment: 
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Figure 7 illustrates the general topology of a source in 
accordance with a preferred embodiment; 

5 Figure 8 illustrates the general topology of a broadcast 

operation center in accordance with a preferred embodiment; 

Figure 9 illustrates the topology of a content provider facility 
and a broadcasting operation center including an input 
10 gateway, an information store and output gateways in 
accordance with a preferred embodiment; 



Figure 1 0 illustrates the output gateways communicating with 
the uplink facility of the source in accordance with a preferred 
15 embodiment; 

Figure 1 1 illustrates the uplink technical core in accordance 
with a oreferred embodiment; 



20 Figures 12 illustrates the receiving facility in accordance with a 
preferred embodiment; 

Figures 1 3 illustrates the layered svstem architecture in 
accordance with a preferred embodiment: 

25 

Figure 14 illustrates the application services layer in accordance 
with a preferred embodiment: 
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packets and has an effect on 
performance but has provided an 
intermediate solution for IP 
Multicast routing on the Internet 
while router vendors decide to 
support native IP Multicast 
-routing. 


Duplex 

Communications 


Two-way point to point 
communications . 


internet 


A grouD of networks that are 
interconnected so that they appear 
to be one continuous network, and 
can be addressed seamlessly at the 
Network Layer Three of the OSI 
model. Also, the "Internet" (capital 
I) is the name given to the global 
network also known as the "World 
Wide Web". 


Internet Group 
Management 
Protocol 
(IGMP) 


IGM? was primarily designed for 
hosts on multi-access networks to 
inform locally attached routers of 
their group membership 
information. This is performed by 
hosts multicasting IGMP Kost 
Membership Reports. Multicast 
routers listen for these messages, 
and then can exchange group 
membership information with 
other multicast routers. This 
allows distribution trees to be 
formed to deliver multicast 
datagrams. The original version of 
IGMP was denned in RFC 1112. 


Internet 
Protocols (IP) 


An unreliable, connectionless 
datagram delivery service that 
allows networks to interact in a 
coherent manner and to pass data 
across multiple networks. The 
TCP/IP standard protocol defines 
the IP datagram as the unit of 
information passed across an 
1 Internet and provides the basis for 
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connectionless narir^r H^iivrorxr 
senlce. IP includes the ICMP 
control and error message protocol 
as an integral part. It provides the 
functional equivalent of ISO OSI 
Network Services. 


Intranet 


A subset of a larger network. An 
interconnected set of networks 
within a particular domain, such 
as a corporation, using IP or 
proprietary protocols to 
communicate between networks. 


IP Address 


The 32-bit address assigned to 
hosts that want to participate in a 
TCP/IP Internet. 


IP datagram 


The basic unit of information 
oassed across a TCP/IP Interne:. 


Local Area 
Network (LAN) 


A nerwork nhvsicanv rrnnrir^^^ tn a 
small region of space, typically . 
within a single building; 
contrasting with a Wide Area 
Nerwork (WAN), which may be 
countrvwide or even worldwide. 


Multicast 


IP -Multicast is the H&_«-n 
addressing scheme in IP developed 
by Steve Deering at Xerox PARC. A 
set of Internet Protocols de^i^ed 
to allow point to multipoint 
distribution of data. 


Multicast 
Address 


An address, within a ranse of I? 
addresses, that identifies the data 
as a multicast session. 


Multimedia 


Digital information intended to 
interface with the human senses. 


Protocol 
Independent 
Multicast 
(PEVI) 


PIM was designed to take 
advantage of two existing multicast 
routing protocols, DVMRP and 
CBT. It exhibits the behavior of a 
protocol in a region of dense group 
membership flooding multicast 
packets using Reverse Path 
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Multicasting, while also taking 
advantage of the work done for 
sparse group membership in Core 
Based Trees. Hence, the protocol 
has two modes, dense and soarse. 


Protocol 
Independent 
Multicast— 
Sparse Mode 
(PIM-SM) 


The Protocol Independent 
-Multicast-Sparse Mode (PLM-SM) 
architecture: 

■ maintains the traditional IP 
multicast service model of 
receiver-initiated membership: 

■ uses explicit joins that 
propagate hop-by-hop from 
members' directly connected 
routers toward the distribution 
tree. 

■ builds a shared multicast 
distribution tree centered at a 
Rendezvous Point, and then 
builds source-specific trees for 
those sources whose data traffic 
warrants it. 

■ is not dependent on a specific 
unicast routing protocol: 

• uses soft- state mechanisms to 
adapt to underlying network 

rnrditloriS and ^r™ 1 r rhrnP7-rnr<v 

The robustness, flexibility, and 
scaling properties of this 
architecture make it well suited to 
larse heterogeneous internetworks. 


Routers 


An OSI network layer (Layer 3) 
device that can decide which of 
eAvprs 1 na tin o. network traffic will 
follow based on some optimality 
metric. Routers forward packets 
from one network to another, 
based on network layer 
information. . 


Simplex 

Communications 


One-way communications. In a 
simplex environment, there is onlv 
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a trans mil or receive path available 
between two network comoonents. 


The OSI model 


The ISO seven-layer model 
attempts to provide a way of 
part: cloning any computer network 
into independent modules from the 
lowest (physical) layer to the 
highest (application) layer. Many 
different specifications exist at 
each of these lavers. 


Tunneling 


Encapsulation of network traffic at 
one interface for decapsulation by 
a peer interface. Also used to 
establish virtual connecting 
interfaces between subnets. 


| Umc^i i Single destination addressing 



Table 2 - Multicast Network Terms 



JJefmiticm of 1 
terras 1 


AdimnisTratively 
scoped addresses 


A range of Multicast addresses 
which are limited to intranet or 
other denned domains and which 
are not distributed to the general 
internet. 


Application 
Clients 


Network devices that request and 
receive multicast data from 
acclication servers. 


Application 
Server 


The server which originates the 
multicast distribution of a 
muizicas t aoDlication. 


Boundary 
Routers 


P.outers which interface between 
the satellite insertion point and 
dcvv-nstream clients. This is the 
first router the received multicast 
signal is distributed to. 


D'o^Tistream 
Clients 


Application Clients with a 
boundary router and possibly 
other routers, between them and 
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I the insertion Doint. 


Downstream 


Routers located downstream of the 


Routers 


boundarv router. 


GRE Tunneling 


Generic Routing Encapsulation 
Tunneling protocol developed by 
Cisco that can encapsulate a wide 
variety of protocol packet types 
inside IP tunnels, creating a virtual 
point-to-point link to Cisco routers 
at remote points over an IP 
intprnet Bv connecting 
multiprotocol subnetworks in a 
single-protocol backbone 
environment. IP tunneling using 
r.p£ allows network expansion 
across a single-protocol backbone 
environment. 


inrouiiK 


A/frr^ Inrranpf based on IP 


Insertion Point 


The point where a satellite receiver 

i*q arrarhed to a_ T AM or Other 
n ArrrnrV COTTTDOnent. 


Insertion Point 
Clients 


Application Clients that are 
directly connected to the inseraon 
ooint LAN. 


Lr I v 


a mnincast a_Dnlicanion from 
Preceot. 


t MMSE 


1 MuitiMedia Services Engineering 


Operations LAN 
Segment 


A LAN Segment which interfaces 

^ ■ 1 1 r Vi ^ ss T^nli^^i Hon ^prvP r t" r! ^ 
UCLwCwIi LXlC dUUllLaUUil 3Ci vc. t 

downstream clients and the 
Operations Router. 


Operations 
Router 


Interface router between 
Operations LAN Segment. Uplink 
LAN Segment and terrestrial 
network. 


Satellite 

Transmission 

Path 


The combined terrestrial and space 
segment path from the Uplink LAN 
to the receiving antenna. This path 
uses the dedicated telephony 
network route to the satellite 
uolink site, where the sisnal is 
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inserted into the uplink signal for 

rVip annrnnriflrp ^pr^llifp " i ft ^ 

satellite broadcasts the signal to a 
'foorarint' that covers the 
Continental US with 'spot beams' 
aimed at Hawaii and Alaska, (spot 
beams optional) 


Simplex Satellite 
Multicast 


One-way communication over a 
satellite of a multicast datastream. 


Uplink LAN 


LAN connected to the Operations 
router. This LAN distributes 
multicast traffic to the satellite. 



Table 3 -Multicast Applications ±enns 



Xleftnition of 1 


CPU 


The Processor or chip in a computer 
that carries out all the instructions of 
a program and controls all the other 
oarts of a comDuter. 


Decoder 


A device for decompressing a 
compressed incoming bitstream, then 
splitting it into its audio and video 
components, and converting the data 
into analog signals for Dlavback. 


Encoder 


A device that records, digitizes, and 
compresses analog audio and video- 
content. 


Frame Rate 


The number of complete single video 
pictures that are streamed and 
measured oh a per second basis. Tne 
acronym usually used is displayed as 
ffosl. " 


Functional 
Testing 


In System Testing, testing which 
attempts to find a discrepancy 
between a program and its 
specification. 


Graphical 
User Interface 


Graphical User Interface: an 
Interactive screen disolav where the 
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user can move a Mouse to point the 
'arrow* cursor at symbols (icons or 
buttons) that represent data or 
instructions to the machine, reducing 
the need for kevboard tvoing 


I/O Operation 


A task on a computer that reads 
and/or writes data to an external 
hardware device such as a CD-ROM, 
floDDv disk, hard drive. 


MPEG1 


An International Standards 
Organization (ISO) standards that 
addresses the methods for encoding 
video and audio at bandwidth rates of 
approximately 1.5 Mbps (suitable for 
CD-ROM). 


Parallel 
Processing 


The ability to achieve multiple tasks 
under a single PC configured with a 
single operating system 
simultaneouslv. 




Random Access Memory. A device, 
often in the form of a chip (or set of 
chins) that stores Data and programs 
for immediate use by a CPU. The 
contents of RAM memory are normally 
lost when the machine is switched off. 


Testing 


In System Testing, tests used to verify 
each new version of the system 
whenever that system is modified. It 
verifies the modification and 
investigates the impact of changes on 
the er^stins functions. 


Streaming 


A bit sequence of compressed digital 
video. 


Video 
Resolution 


Tne number of pixels per unit area 
with the greater the number of pixels 
present the higher the resolution. 
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Overview 

Figure 1 illustrates the general topology of a source and a 
receiving facility communicating via a network in accordance 
with a preferred embodiment. The flow of data starts at a 

5 content source 100.- The content may be in any one of a 

number of digital forms, including data files and real-time data 
streams. Data in every form and format is enabling. The data 
streams may be audio, or video originating from local sources or 
international sources. The content is transmitted to a source 

10 110 via any one of a number of methods, including network. 
Internet, Intranet, or radio broadcast. The data is forwarded to 
a satellite transmitter 120. received and forwarded to an 
orbiting satellite 130, received by a satellite receiver 140 and 
forwarded to a receiving facility 150 and transmitted to one or a 

15 plurality of destinations 160. In the alternative, the path of 
transmission between the source 110 and the receiving facility 
150 may be via the Internet 170. The source 110 includes a 
content provider facility and a broadcast operation center. The 
receiving facility 150 includes a down-link gateway, a local 

20 Drosram menu database and an application services facility. 
The flow of data via the satellite links 120, 130, 140 is 
unidirectional, from the source 1 10 to the receiving facility 150. 

Tne flow of data via the Internet 170 is unidirectional from the 
25 source 1 10 to the receiving facility 150. However, data 
indicating the success or lack of success of all content 
transmissions is forwarded to the source 110 via the Internet or 
public switched telephone network or ISDN at data 



. 20 



SUBSTITUTE SHEET (RULE 26) 

BNSDOCID: <WO 9909707A 1_l_> 



WO 99/09707 



PCT/US98/14606 



transmission speeds ranging from 28.8 kilobytes per second to 
1.5 megabytes per second. 170. 

Figure 2 illustrates the physical system decomposition in 
5 accordance with a preferred embodiment. Data is introduced 
into the system either directly from external content providers 
200 or from stored content 2 1 0 that resides on mass storage in 
the system. In the orbital space segment, the data is 
multiplexed by a multiplexer (MUX) 220. transmitted and 
10 received by an integrated receiver device (IKD) 230 at the local 
site of the destination(s) . At the local destination site, the data 
is routed by a network router 240 to a local area network (LAN] 
250 and distributed via multicasting to any number of desktop 
svstems 260. caching servers 270 and video servers 280. 



15 



IP Multicasting 
Broadcasting data to various individual destinations, each of 
which have satellite receiving facilities, via a satellite has been 
done before. However, it is new to multicast data using IP 
directly to various receiving facilities, which in turn transmit the 
data to the destinations. 

Figure 3 illustrates an IP datagram in accordance with a 
preferred embodiment. At the IP level, data is sent in datagram 
packets, a self-contained, independent entity of data carrying 
sufficient information to be routed from the source to the 
destination without reliance on earlier exchanges between this 
source, destination and the transporting network. Datagrams 
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are defined by Internet Engineering Task Force RFC 922 as ' 
illustrated in Figure 3. The version number 300 indicates the 
format of the Internet header. The Internet Header Length (IHL) 
305 indicates the length of the Internet header in 32-bit words. 

5 The Service Type 310 indicates the level of service that should 
be given by routers and networks. The Length 315 indicates 
the total length of the datagram in octets. The Identification 
320 indicates where this datagram fits in with a scheme of 
assembling it with other datagrams at the destination. Flags 

10 325 indicate whether the datagram may be fragmented into 
multiple datagrams. The Fragment Offset 330 indicates where 
in the datagram this fragment belongs. The Time to Live 335 
indicates how many times this datagram may be passed from 
one Internet link to another before it will be discarded. The 

15 Protocol 340 indicates which Internet protocol this datagram 
complies with, which is Internet Group Management Protocol 
(IGMF) defined by IETF RFCs 1112 Appendix I and 1122 section 
3.2.3 in accordance with a preferred embodiment. IGMP is used 
by IP multicast routers to locate and identify multicast group 

20 members on their directiy attached subnets. Multicasting can 
be accomplished alternatively by subnet broadcast in 
accordance with EE FT RFC 922 or UDP flooding. IGMP is 
supported by Protocol-Independent Multicast - Dense Mode 
(PIM-DM) routing protocol in accordance with a preferred 

25 embodiment. IP multicasting can be alternatively supported by 
routing protocols such as the Distance Vector Multicast Routing 
Protocol (DVMRP). Multicast Open Shortest Path First (MOSPF). 
Core Based Trees (CBTJ. Protocol- Independent Multicast - 
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Sparse Mode (PIM-SML Real-Time Streaming Protocol (RTSP) 
Real-Time Transport Protocol (FTP) or Reservation Protocol 
(RSVP). The Header Checksum 345 is a checksum of the 
header fields only. The Source Address 350 is the IP address of 

5 the source of each datagram. IP addresses are 32 bits long. 
The Destination Address 355 indicates the IP address of the 
destination. Destination addresses confrom to five classes. A. 
B. C. D, and E. Class D addresses are compliant IGWP 
multicast addresses, wherein the lower 28 bits identify the 

10 multicast group to which a packet is destined, and the four 
hiah-order bits are set to ** 1 1 10." Each unique multicast 
address indicates a specific multicast group of hosts and each 
group consists of zero or more hosts. 

15 Each multicast router may belong to any number of multicast 
groups. A multicast address is assigned to a set of receivers 
defining a multicast group. Senders use the multicast address 
as the destination I? address of a packet that is to be 
transmitted to all group members. Class D addresses range 

20 from 224.0.0.0 to 23S.255.255.255. Tne Options 360 are a 
variable number of bit flags that indicate a number of options. 
FinaHv. the Data 365 is placed at the end of a datagram packet. 

Data larger than some arbitrary size is divided into multiple 
25 datagrams, all of which are transmitted separately and 

independently. A sequence of IP packets sent from a source to a 
destination could travel over different paths. Tne original data 
set is reconstructed at the destination by assembling the data in 
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tiie individual datagram packets. A datagram consists of two 
major portions: The IP header and the Data 365. Tne IP header 
is appended before the data. 

Figure 4 illustrates the path of an IP multicast datagram over a 
network in accordance with a preferred embodiment The 
source computer 400 initiates transmission of an IP multicast 
datagram 410 to a IP multicast router 420. The IP multicast 
datagram 410 is identified as an IP multicast datagram by the 
class D destination address. The IP multicast router 420 
receives the IP multicast datagram 410, and transmits the IP 
multicast datagram 41 0 as an I? Ulricas t datagram 430 to each 
of the individual destinations 440. 

To receive multicast packets, an IP multicast router must first 
request that it join a particular multicast group. This is. done 
using a r^n zo setsockoptQ in accordance with a preferred 
embodiment as presented below: 

struct mreq_iu 

( 

struct in.addr imr.multiaddr; // multicast group to join 
struct in_addr imr_tnterface; / / interface to join 

} 

struct mreq_ip m_req; 

setsockopt(sock. 

IFJPFROTO. 

IF.ME M3 E RSKIP.ADD , 

&m_req,sizeofl(in_req)); 
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After the I? multicast router has joined a multicast group. IP 
multicast data from an IP multicast source will be received by 
ar. !? multicast router. 



Boundary Router In Accordance With A Preferred 

Embodiment 



Cisco 2509 1 Ruiminfi 11.0.11 1 


Hrlrhpi >r>mn: t IP Multicast Routing 1 


Protocol Setup: 


Static Route Distribution 
OSPF 


16S.34.120.12S 


interface Setup: 


insertion Point LAN 
Segment 
Downsrrfiarn LAN 
Segment 
GPZ Tunnel 


166.34.120.33 -PEVi 
166.34.120.235 -PIM 
166.34.120.225 - NO PE 



The source- code for a downstream router in accordance with a 
preferred embodiment is provided below as an aid in teaching 
or - of ordlnarv skill in the art to make and use the invention. ■ 



vernier. 11.0. 

service udp-small-servers 
15 semce tcp - am ? 1 } -s erv ers 

; 

hesmame 2509A 
r 

enable password sir/ 
20 ! 

ip multicast-routing 

ip cvmrp route-limit 7000 

interface TunnelO 
25 tc unnumbered SerialO 

tunnel source 166.34.120.225 
tunnel destination 166.35.252.52 

; 

interface E theme tO 
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ip address 166.34.120.33 255.255.255.224 
ip pirn dense-mode 

; 

interface SerialO 
5 ip address 166.34.120.225 255.255.255.224 
ip pirn dense-mode 
bandwidth 2000 
no cdp enable 

iO incenace Serial 1 
no ip address 
shutdown 

; 

router ospf 200 
15 redistribute static subnets 

network 166.34.0.0 0.0.255.255 area 0.0.0.0 

j 

io ccmain-name rch.mci.com 
ip name-server 166.35.191.120 
20 it) classless 

ip route 0.0.0.0 0.0.0.0 166.34.120.226 

ip route 166.34.120.123 255.255.255.224 TurmelO 

iD ost:f name-lookup 

ip -route 166.34.120. 12S 255.255.255.224 156.34.120.32 
2f no logging console 

access-list 100 permit icmp any any 
access-list 100 deny ip arrr host 224.0.0.5 
access-list 100 permit ip host 166.34.120.226 any 
; 

30 ! 

line ccn 0 
password sky 
line 1 S 

transport input all 
35 line aux 0 

transport input all 
line vty 0 1 
password sky 
login 
^0 . length IS 
line vty 2 4 
password sky 
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login 

I 

ncp source SerialO 
end 



Downstream Router In Accordance With A Preferred 

Embodiment 



Cisco 2509 


Rurmins 11.1.6 




Global Senior 


IP Multicast Routing 




Protocol Senior 


OSPF 




Inrena.cs Setup: 


Uosrream LAN Segment 
Downstream LAN 
Seament 


156.34.120.226 -PIM 
166.34.119.162 - PIM 



10 Tee source code for a downstream router in accordance with a 
preferred embodiment is provided below as an aid in teaching 
one of ordinary skill in ine art to make and use the invention. 



version 11.1 
15 service udp -small-servers 
service tcp -small- servers 

I 

hostname 250SB 
I 

20 enable password sky 

ip multicast-routing 

ip cvmrp route -limit 7000 

; 

25 interface EthemetO 

ip address 166.34.119.162 255.255.255-240 
ip pirn cense -mode 

interface SerialO 
30 ip address 156.34.120.226 255.255.255.224 
ip pin dense-mode 
bandwidth 2000 
clockrate 2000000 

j 

35 interface Serial 1 
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no ip address 
bandwidth 1500 
shutdown 
cicckrate 2000000 

5 ! 

router ospf 200 

network 165. 34.0. Q 0.0.255.255 area 0 

! 

ip domain- name rcii.mci.com 
10 ip name-server 166.35.191.120 
ip classless 
no logging console 

access-list 100 permit icmp any any 

j 

15 line con 0 

password sky 
line 1 8 
line aux 0 
line vty 0 
20 password sky 
login 
length IS 
line v— 1 4 
passvvcrd sky 
25 icsin 
r 

ntp clock-period 171S0064 
nrp source EthemetO 
end 

30 

Figures 5A through 53 comprise detailed logic presented as a 
flcvv- chart of a computer software program that transmits IP 
multicast data using sockets rn accordance with a preferred 
embodiment. The sender program on the source computer is 
25 started 5A00. An IP address structure labeled "sock_addr\ a 
data buffer named "data", a multicast request structure name 
M m_rea". an integer name "count", and an integer named 
"status" are instantiated 5A10. Data is copied to a buffer 
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named "data" 5A20. Status is set to the return code of a call to 
"socketQ" which passes "AF_INET" and "SOCKDGRAM" to open a 
UDP socket 5A30. If status is less than numeric 0 5A40 
indicating failure on the socketQ call, the program is exited in 
5 an error condition 5A50- Otherwise, socket address structure 
sock addr is initialized to all numeric zeros 5AS0. 

The sin.family member of sock_addr is set to ATJNET 5300. 
The s.addr member of the sin_addr member of sock.addr is set 

io to the I? multicast address of the destination multicast group 
5B10. The 5in_port member of sock_adar is set to the port. • 
number 5B20. The multicast transmission of data is attempted 
by invoking "sendtoO" and passing as parameters the integer 
status, data and number of bytes in data, a pointer to 

15 sock.adcr. and the number of bytes in sock.adcr and setting 
the integer status to the return code of the call to senctcO 5330. 
If status is less than numeric 0 5340 indicating failure on the 
sendtoO call.' the program is exited in an error conciccr. 3350. 
Otherwise, the program is ejcited in a success condition 5360. 

20 

Figures 6A through 63 present detailed logic in a Qott chart of a 
computer software program that receives IP multicast data 
using sockets in accordance -with a preferred embodiment. The 
receiver program on the multicast router is labeled 6A00- An IP 
25 address structure named "sock.addr". a data buffer named 
"data", a multicast request structure name "m.req". and an 
integer named "count" axe instantiated 6A10. Status is set to 
the return code of a call to "socketQ" which passes "AFJNET 
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and "SOCKDGRAM" to open a UDP socket 6A20. If status is 
less than numeric 0 6A30 indicating failure on the sockecQ call, 
the program is exited in an error condition 6A40. Otherwise, 
socket address structure sock.addr is initialized to all numeric 
5 zeros 6A50. 

The sin.family member of sock_addr is set to AFJNET 6B00. 
The s.addr member of the sin.addr member of sock.addr is set 
' a valid IP address SB 10. The sin_porc member of sock.addr is 

LO set to the pom number 6320 . The multicast transmission of 
data is attempted by invoking ''recvrromCT and passing as 
parameters the integer status, data and number of bytes in 
data, a pointer to sock.addr. and the number of bytes in 
sock.addr and setting the integer status to the return code of 

15 the caJI to sendtoQ 5B30. If status is less than numeric 0 6B40 
indicating failure on the sendtoO call, the program is exited in 
an error condition 6B50. Otherwise, the program is exited in a 
success condition 6B60. 

20 Multicasting utilizes tunneling to connect islands of multicast 
routers separated by links which do not support E? multicasting. 
In tunneling, an entire datagram, including the I? header, is 
encaosuiated in another IP datagram, which has a destination 
address of the network router that deencapsuiates the tunneled 

25 IP datagram. When the datagram arrives at the destination 

router machine, the datagram is deencapsulated by stripping off 
the IP header, leaving the data, which is the original datagram. 
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The router then forwards the datagram to all members of the 
multicast group. 

Topologies 

5 Figure 7 illustrates the general topology of a source in 

accordance with a preferred embodiment. A source includes 
three major functions. The content provider facility 700, the 
broadcast operation center 710. and the uplink facilities 720. 
Data generated at the content provider facility 700. is 

10 transmitted to the broadcast operation center 710. and is 
transmitted to the uplink facility 720. 

Figure 8 illustrates the general topology of a broadcast 
15 operation center in accordance -with a preferred embodiment 
Data enters the broadcast operation center through the input 
gateways 800 which includes a file gateway, a schedule gateway 
and a stream gateway. Data streams are forwarded to the 
output gateways 810 which includes a repair server, a playout 
20 server, and shares the stream gateway with the input gateway. 
The stream gatewa]/ is shared by the input gateways 800 and 
the outDut satewavs 8 10 to accommodate the urgent 
transmission requirements of-stream data. Data files are 
transmitted to the information store 820. and forwarded to the 
25 ouraut satewavs '810. 

Figure 9 illustrates the topology of a content provider facility 
and a broadcasting operation center including an input 
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<*atewav an information store and output gateways in 
accordance with a preferred embodiment. Data streams 900 
and data files 905 are received from external sources by the 
content provider gateway 910. Data streams 900 axe assumed 
5 to be RTP/UDP unicast or multicast. Secure authentication, 
and protection mechanisms including IPSEC are implemented 
in the content provider gateway. Data files 905 are transmitted 
using a store-and-forward transmission architecture, u tilizin g 
conventional file transfer and may be secured using EPSEC. 

10 SSL. or S-KTTP to 

reduce the risk of exposing that information to interception by 

third parties. 

One such attempt to provide such a secure transmission 
if channel is a secure payment technology such as Secure 

Electronic Transaction (hereinafter "SET'), jointly developed by 
the Visa and MasterCard card associations, and described in 
Visa and MasterCard's Secure Elec^oruc Transcctan (SET) 
, Specifjzsron, February 23. 1996. hereby incorporated by 
20 reference. Other such secure payment technologies include 
Secure Transaction Technology ("SIT"), Secure Electronic 
Payments Protocol ("SEP?"). Internet Keyed Payments ("iKF"). 
Net Trust, and Cybercash Credit Payment Protocol. One of 
ordinary skill in the art will readily comprehend that any of the 
25 secure payment technologies can be substituted for the SET 
protocol without undue ercpertmentation. 
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Another such attempt to provide such a secure transmission 
channel is a general-purpose secure communication protocol 
such as Netscape. Inc.'s Secure Sockets Layer (hereinafter 
"SSL") . as described in Freier. Karlton & Kocher (hereinafter 
5 "Freier-). The SSL Protocol Version 3.0. March 1996. and hereby 
incorporated by reference. SSL provides a means for secure 
transmission between two computers. SSL has the advantage 
that it does not require special-purpose software to be installed 
on the customer's computer because it is already incorporated 
io into widely available software that many people utilize as their 
standard Internet access medium, and does not require that the 
customer interact with any third-party certification authority. 
Instead, the support for SSL may be incorporated into software 
already in use by the customer, e.g.. the Netscape Navigator 
is World Wide Web browsing tool. However, although a computer 
on an SSL connection may initiate a second SSL connection to 
another computer, a drawback to the SSL approach is each SSL 
connection supports only a two-computer connection. 
Therefore. SSL does not provide a mechanism for transmitting 
20 encoded information to a merchant for retransmission to a . 
payment gateway such that a subset of the information is 
readable to the payment gateway but not to the merchant. 
Although SSL allows for robustly secure two-party data 
transmission, it does not meet the ultimate need of the 
23 electronic commerce market for robustly secure three-party data 
transmission. Other examples of general-purpose secure 
communication protocols include Private Communications 
Technology ("PCT) from Microsoft. Inc.. Secure Hyper-Text 
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Transport Protocol ("SHTTP") from Theresa Systems, Shen. 
Kerberos. Photuris, Pretty Good Privacy ("PGP") and Ipv6 which 
meets the IPSEC criteria. One of ordinary skill in the arc will 
.readily comprehend that any of the general-purpose secure 
5 communication protocols can be substituted for the SSL 
transmission protocol without undue experimentation. 

The content provider gateway 910 packages the data in packets 

io for transmission to the broadcast operation center. The content 
provider facility encrypts all data at the application level. Data 
streams 900 have a high priority as a function of the urgent or 
real-time nature of the data, and are transmitted to the output 
gateway in the broadcast operation center to speed passage of 

15 the data. Data files 905 have lower priority than data streams 
900, and are managed by the broadcast operation center on a 
scheduled basis. The content provider facility 910 
communicates to the broadcast operation center via a network 
using TCP/IP protocol. Tne communication link between the 

20 content provider gateway 9 10 in the content provider facility 

and the schedule gateway 9 15 in the broadcast operation center 
is a secure SSL or S-KXTP protocol. The content provider 
satewav 910 and the schedule gateway 915 exchange 
information on the scheduling of transmission of data files 905. 

25 More specifically, transmission of data files 905 is scheduled, 
revised and queried by the schedule gateway 915. Tne content 
provider gateway 910 transmits scheduled data files 905 to the 
schedule gateway 920 via a network connection using Unicast. 
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and either File Transfer Protocol (FTP) or IPSEC. The file 
gateway 920 writes the data files 905 to the file store 925. a 
data storage medium, and forwards the data files 905 to the 
output gateways 930 at the direction of the subscription 
5 manager 935. The subscription manager 935 transmits 
scheduling information to the output gateways 930. 

Figure 10 illustrates the output gateways communicating with 
the uplink facility of the source in accordance with a preferred 

10 embodiment. The content provider gateway 1000 transmits 
.data streams to the stream gateway 1010. circumventing the 
store-and-forward function that data files are subject to. The 
stream <*atewav 1010 functions as a File Transfer Protocol (FTP) 
proxy gateway, and an Internet Protocol (TP) circuit gateway. . 

15 The subscription manager 1020 transmits to the stream 
gateway 1010. the playout gateway 1030. and the repair 
<*atewav 1040 information that uniquely identifies data that 
passes through each of the respective gateways. This 
information enables the respective gateways to multiplex 

20 authentication and session information including a multicast 
address, unique identifier, the destination uplink, timing, 
checksum, and format information into the data sxream. 
Simultaneous delivery of data'.streams and data files at the 
destination can be coordinated by multiplexing authentication 

25 and session information in the data streams and data files 

accordingly. The stream gateway 1010 and the playout gateway 
1030 monitor the timeliness of data to the uplink gateways. 
The playout gateway 1030 and the repair gateway 1040 will 

35 
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retrieve data files from the file store 1050 under the 
management of the subscription manager 1020. 

The output gateways will transmit data to the uplink gateways 
5 based on the multiplexed session information, which is either 
the Internet multicast gateway 1060. the fixed service satellite 
(FSS) uplink gateway 1070. or the digital broadcast satellite 
PBS) uplink gateway 1080. Examples of DBS services are 
Direct TV and ASkyB. The uplink gateways will convert 
10 protocols and generate frames as appropriately indicated by the 
session information and the requirements of the respective 
uplink facilities. Data is transmitted by the stream gateway 
1 0 1 0 to the uplink gateways via FTP. 

15 Figure 1 1 illustrates the uplink technical core in accordance 
with a preferred embodiment. Data files are transmitted by the 
output gateways of the broadcast operation center of the source 
via a digital network interface 1 100. Data steams are 
transmitted via an analog network interface 1105. analog data 

20 is transmitted via video tape recorder 1110. or data is 

transmitted via a local content feed 1115 into a 270 megabit per 
second network backbone 1120. A record of each transmission 
is made to a video tape recorder server 1 125. The data is 
encoded conforming to MPEG. Indeo orH.261 standards 1130 

25 and encrypted 1135. The data is encrypted according to 
conditional access (CA) protocol 1 140 and multiplexed 1145 
with authentication and session information including a unique 
identifier, the destination uplink, timing, multicast address. 
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checksum, and format information into the data stream- The 
multiplexed data is mixed with 4-6 television content 1150. 
audio 1 155. and data 1 160. Forward error correction (TEC) is 
added to the data 1165. The data is transmitted and 
5 modulated according to quadrature phase shift keying (QPSK) 
specifications 1 170. a Radio Frequency (RF) exciter intervenes 
in the data transmission 1 175, and an RF power amplifier 
amplifies the data signal 1 180. 



l0 Receiving Facility 

Figure 12 illustrates the receiving facility in accordance with a 
preferred embodiment. The receiving facility includes four 
primary components, a downlink gateway 1200. a local program 
. menu database 1205.. application services 1210 and one or 
15 more client computers 1215. Data that is received by a satellite 
receiver 140 is transmitted to a satellite downlink gateway 
1200. The satellite receiver 140 is connected to the downlink, 
tfatewav 1200 via a coaxial cable which is a type of cable with a 
solid central conductor surrounded by an insulator, surrounded 
20 by a cylindrical shield woven from fine wires. The shield is 
connected to an electrical ground to reduce electrical 
interference. Coaxial cable is typically used to carry high 
frequency signals including video or radio. 

i 

25 The downlink gateway 1 200 removes the satellite protocols from 
the data and frames that were added to the data by the uplink 
facilities before satellite transmission, yielding the data 
multiplexed with the authentication and session information. A 
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downlink gateway 1200 includes one or more receiver cards 
1225 that include a tuner, tuner control and satellite decoders. 
The data is transmitted by the receiver card(s) 1225 to the NDIS 
1230 and the WINSOCK 1235 layers of software or through the 
5 MPEG-2 compliant 1240 and the MCI compliant 1245 layers of 
software. Then the data is reformed into IP packets for 
transmission on a local area, network, or not reformed, as 
indicated by the multiplexed destination information in the data 
1250. 

10 

IP is designed for use in interconnected systems of packet- 
switched computer communication networks, and provides for 
transmitting blocks of data called datagrams from sources to 
destinations, where sources and destinations are hosts 

15 identified by fixed length addresses. IP also provides for 

fragmentation and reassembly of long datagrams, if necessary, 
for transmission through "small packet" networks. The model of 
operation requires an IP compliant module to reside in each 
host engaged in IP communication and in each gateway that. 

20 interconnects networks. These modules share common rules 
for interpreting address fields and for fragmenting and . 
assembling IP datagrams. In addition, these modules 
(especially in gateways) have procedures for making routing 
decisions and other functions. IP treats each IP datagram as an 

25 independent entity unrelated to any other IP datagram. There 
are no connections or logical circuits (virtual or otherwise). 
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The data is transmitted either directly to a destination 
standalone client computer 1215 using a multicast IP protocol, 
or indirectly to one or more client computers 1215 through the 
application services 1210. The application services 1210 utilize 

5 a file capture service 1255 using a file retrieval mechanism 
where the data is files, or a video replay service 1260 using a 
multicast video steam replay mechanism if the data is streamed. 
A local program menu database 1205 controls which data is 
transmitted at what time utilizing authentication and session 

io information multiplexed into the data between the downlink 
ffatewav 1200. the application services 1210 and one or more 
client computers 1215. 



15 



25 



Alternative Architectures 
Figures 13 illustrates the layered system architecture in 
accordance with a preferred embodiment. Stream data is 
managed at the highest level by video storage and retrieval 
services 1300 that is supported by lower level real time 
transport services 1310 of the stream data. In comparison, 
data files are managed by caching and proxy services 1320 that 
are supported by web transport 1330 Internet protocols. All 
data services are supported by IP multicast services 1340 that 
have real-time transport capabilities for transport of stream 
data and store-and-forward capabilities for transport of data 
files. IP multicast services 1340 are directly supported by 
satellite bitpipes 1350. Stream data is transported by different 
software mechanisms than data files because generally the 
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priority and criticality of the data is much higher for stream 
data than for data files. 

Figure 14 illustrates the application services layer in accordance 
5 with a preferred embodiment. In an application of stream data, 
the content provider 1400 inserts stream data 1410 into the 
delivery subnetwork 1420. The delivery subnetwork has 
reserved bandwidth streams for transportation of video service 
and available non-reserved bandwidth streams for data file 
10 transportation. In comparison, in an application of file data, the 
content provider 1430 inserts file data into the delivery 
subnetwork 1420 where the data may be stored for a period of 
time and then forwarded through the delivery subnetwork 
1420. 



15 



Figure 15 illustrates the functional decomposition of 
architectural layers in accordance with a preferred embodiment. 
At the application level of the system function, the content 
provider 1500 performs content insertion 1510 into the 



k 



20 Internetwork, the data is transmitted through the Internetwor] 
to the destination computer 1520. At the Internetwork level, 
the incoming data is routed 1530 either to the subnetwork or 
the Internet 1540. Upon passage through either route, it is 
lastly routed 1550 to the destination computer 1520. At the 

25 subnetwork level, the incoming data is received by a conditional 
access (CA) device 1560. and transmitted to a multiplexer 
(MUX) 1570 in preparation for satellite transmission, then it is 
transmitted through the satellite 1580 to the integrated receiver 
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decoder (IRD) 1590. and transmitted to a conditional access 
(CA) device 1595 and then transmitted to the router 1550. and 
finally to the destination computer 1520. 

5 Figure 1 6 is a block-schematic diagram of a computer system, 
for example, a personal computer system on which the inventive 
information manager operates at numerous points on the 
system, including the source, the receiving facility and the 
destinations. The computer 1600 is controlled by a central 

io processing unit 1605 (which may be a conventional 

microurocessor) and a number of other units, all interconnected 
via a svstem bus 1620, are provided to accomplish specific 
tasks. Although a particular computer may only have some of 
the units illustrated in Figure 16. or may have additional 

15 components not shown, most server computers will include at 
least the units shown. 

Specifically, computer 1600 shown in Figure 16 includes a 
random access memory [RAM] 1615 for temporary storage of 

20 information, a read only memory (ROM) 1610 for permanent 
storage of the computer's configuration and basic operating 
commands, and an input/output (I/O) adapter 1630 for 
connecting peripheral or network devices, including a disk unit 
1625 and printer 1635. to the bus 1620. via cables 1640 or 

25 peripheral bus 1620. respectively. A user interface adapter 
1645 is also provided for connecting input devices, including a 
keyboard 1650. and other known interface devices, including 
mice, speakers, and microphones to the bus 1620. Visual 
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output is provided by a display adapter 1655 which connects 
the bus 1620 to a display device 1660, including a video 
monitor. The computer has resident thereon and is controlled 
and coordinated by operating system software including the 
5 SUN Solaris. Windows NT. or JavaOS operating system. 

Security 

Security provisions to prevent unauthorized access to data are 
implemented at all architectural layers of this embodiment of 

10 the invention. At the subnetwork level, conditional access (CA) 
is implemented at the source before the data is multiplexed as 
shown in Figure 15. Internetwork layer security (IFSEC) is 
implemented by the content provide gateway as shown in Figure 
9. Furthermore, security provisions for authentication of the 

15 user and protection of th.e" data can be implemented outside the 
inventive information manager, passing through the inventive 
information manager transparently with no modification by the 
inventive information manager; end-to-end security 
implemented by the user of the inventive informaticn manager 

20 is independent of the function of the inventive information 
manager and the security policy of the user of the inventive 
information manager is independent of the security provisions 
implemented by the inventive information manager 

25 While the invention is described in terms of preferred 

embodiments in a specific system environment, those skilled in 
the art will recognize that the invention can be practiced, with 
modification, in other and different hardware and software 
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environments within the spirit and scope of the appended 
claims. 
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CLAIMS 

Having thus described our invention, what we claim as new. and desire to 
secure fay Letters Patent is: 

1 1. A method for media communication over a network supporting an 

2 _ . Internet Protocol (IP) from a source computer to one or more 

3 destination computers through a receiving facility, comprising the 

4 steps of: 

5 (a) multicasting data from the source computer via a satellite utilizing an 

6 Internet Protocol (IP) to facilitate routing; 

7 (b) receiving tie data at the receiving facility; 

8 (c) transmitting the data from the receiving facility to each of the' 

9 destinations via the network that supports the Internet Protocol for 

10 routing the information: and 

11 (d) receiving ihe data at the one or more destination computers with 

12 Internet Protocol addresses attached to the network. 

1 2. A methcc for media communication over a network as recited in claim 

2 1, including the step of transmitting the status of the source computer 

3 transmission from the receiving facility to the source computer and if 

4 the s tarns indicates transmission failure then transmitting the data 

5 and destination addresses from the source computer to the receiving 

6 facility. 

1 3. A method for media communication over a network as recited in claim 

2 1. wherein multicasting is implemented through TCP/IP. 
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1 4. A method for media communication over a network as recited in claim 

2 1. including the step of encoding and encrypting the data for security. 

1 5. A method for media communication over a network as recited in claim 

2 1. wherein the data is stream data. 

1 6. • A method for media communication over a network as recited in claim 

2 1 . wherein the data is file data. 

t 7. A method for media communication over a network as recited in claim 

2 1 . wherein the network is the Internet. 

1 8. A computer system that facilitates media communication over a 

2 network supporting an Internet Protocol (IP) from a source computer 

3 to one or more destination, computers through a receiving facility, 
4. comprising: * 

5 (a) the source computer multicasting data from the source computer via a 

6 satellite utilizing an Internet Protocol (IP) to facilitate routing; 

7 (b) the receiving facility receiving the data; 

3 (c) the receiving facility transmitting the data to each of the one or more 

9 :r destinations via the network that supports the Internet Protocol for 

10 ~" routing the information: and 

u (d) the one or more destination computers receiving the data. 
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t 9. A computer system for media communication over a network as 

2 recited in claim 8. wherein the receiving facility transmits to the 

3 source computer the status of the transmission from the source 

4 computer and if the -status indicates transmission failure, then the 

5 source computer transmits the data and destination addresses to the 

6 receiving facility. 

1 lOr A computer system for media communication over a network as 

2 recited in claim 8, wherein multicasting is implemented utilizing 

3 TCP/IP. 

1 11. A computer system for media communication over a network as 

2 recited in claim 8 . wherein the data is encoded and encrypted. 

1 12. A computer system for media communication .over a network as 

2 recited In claim 8, wherein the data is stream data. 

1 13. A r computer system for media communication over a network as 

2 recited in claim 8, wherein the data is file data. 

1 14. A computer system for media communication over a network as 

2 recited in claim 8, wherein the communication link between the 

3 source and the receiving facility includes the Internet. 
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1 15. A computer program embodied on a computer-readable medium for A 

2 compucer system that facilitates media communication over a network 

3 supporting an Internet Protocol (IP) from a source computer to one or 
^ more destination computers through a receiving facility, comprising: 

5 (a) a code segment in the source computer that multicasts data from the 

6 source computer via a satellite utilizing an Internet Protocol (IP) to 

7 facilitate routing to a receiving facility; 

8 (b) a code segment in the receiving facility that receives the data; 

9 (c) a code segment in the receiving facility that transmits the data to each 
10 of the one or more destinations via the network that supports the 

- 1 1 Internet Protocol for routing the information; and 

12 (d) a code segment in each of the one or more destination computers that 

13 receives the data. 

1 16. A computer program for media communication over a network as 

2 recited in claim 15, including a code segment for transmitting the 

3 status of the source transmission from the receiving facility to the 
* source and if the status indicates transmission failure, then 

5 transmitting the data and destination addresses from the source to 

6 the receiving facility . 

1 17. A computer program for media communication over a network as 

2 recited in claim 15, wherein multicasting is implemented through 

3 Intemer Protocol. 
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1 18. A computer program for media communication over a network as 

2 recited in claim 15. including a code segment for encoding and 

3 encrypting the data. 

1 19- A computer program for media communication over a network as 

2 recited in claim 15. wherein the data is stream data. 

i 20. A computer program for media communication over a network as 

2, ^ recited in claim 15, wherein the data is file data. 
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